Licenciamiento y capacidades activables
Modulos PMDefender por licencia
Administra las capacidades que se activan por plan: NGAV, EDR, IOA/IOC, Threat Intel, OverWatch, Discover, Identity, Cloud, Fusion y APIs.
Inventario de licencia
10 modulos y capacidades
| Modulo | Categoria | Licencia | Estado | Madurez | Acciones |
|---|---|---|---|---|---|
| Consola unificada y APIs | Platform | core | 93% |
Ver Editar | |
| Falcon Prevent (NGAV) | Endpoint prevention | core | 90% |
Ver Editar | |
| Falcon Insight (EDR) | Endpoint detection response | professional | 92% |
Ver Editar | |
| Custom IOA & IOC Management | Detection engineering | enterprise | 88% |
Ver Editar | |
| Falcon Discover (IT/Hygiene & Visibility) | Asset hygiene | enterprise | 84% |
Ver Editar | |
| Falcon Fusion (automation / mini-SOAR) | Automation | enterprise | 91% |
Ver Editar | |
| Falcon Identity Protection | Identity security | enterprise | 90% |
Ver Editar | |
| Falcon X (Threat Intelligence) | Threat intelligence | enterprise | 86% |
Ver Editar | |
| Falcon Cloud Security / CSPM / CWPP | Cloud security | elite | 89% |
Ver Editar | |
| Falcon OverWatch (Threat Hunting gestionado) | Managed detection | managed | 94% |
Ver Editar |
Modificar modulo
Falcon X (Threat Intelligence)
Threat intelligence
Falcon X (Threat Intelligence)
Enriquecimiento de alertas, analisis malware/sandbox e indicadores de campanas, actores y TTPs MITRE.
threat_intelligenceendpoint.fileemail
Capacidades
Lo que habilita la licencia
alert enrichment
malware sandbox
campaign intelligence
actor/TTP context
Configuracion
Controles disponibles
feed priority
confidence thresholds
sandbox routing
MITRE enrichment
Ecosistema
Integraciones y dependencias
IntegracionesMISPVirusTotalSIEM
Dependenciascustom_ioa_ioc_management